$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b6007620-b8bf-3a41-8b2b-01dfba41d652.roa File: b6007620-b8bf-3a41-8b2b-01dfba41d652.roa (raw, json) Hash identifier: UZ21XGDPnPXLZ+N5pPKXcjwPFNGLu/XLubBBv0quJ0A= Subject key identifier: 0C:C1:E1:85:F6:CD:D8:71:46:A3:61:32:DC:BC:C7:60:96:A3:6A:53 Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584BBA1033C2E455AD6020D64180 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b6007620-b8bf-3a41-8b2b-01dfba41d652.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 395213 IP address blocks: 27.0.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:33:c2:e4:55:ad:60:20:d6:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=68a4f356-0209-4fc5-bc5f-14d573c55310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:2d:1c:0a:65:8c:06:81:d0:96:3e:d7:35: b6:c7:91:33:78:cb:e9:22:fb:56:b7:9e:dd:e1:18: 14:53:fc:e5:50:e7:db:bb:5a:4e:25:bd:bd:fb:04: ca:79:68:9f:f2:c6:b0:98:49:a7:d4:f4:43:ea:a2: 58:a0:7b:80:f0:b5:70:89:6d:49:16:6a:17:0b:fa: 75:ad:62:1a:2a:98:fd:ef:10:13:be:0e:d4:f1:dc: 11:ba:28:37:35:75:ff:3e:6d:1d:40:fb:c4:a9:3f: c6:79:85:38:d2:f4:b4:3d:de:9a:fd:36:9e:30:81: 61:d0:3a:d9:1f:f5:21:9f:f0:7f:e9:85:47:b9:2f: 21:b0:c9:15:36:e7:8b:e5:d1:53:0a:c0:20:dc:e5: c7:ac:b2:91:0f:f5:ed:25:4a:4f:bc:af:c3:18:18: 34:97:a9:f4:04:65:51:61:12:c9:ce:99:fa:96:69: 2e:b8:56:a9:d5:52:1f:f3:c8:55:43:91:b3:eb:78: 53:3d:2d:83:fe:b3:f1:64:3e:8c:43:91:f6:56:d6: d8:d3:d1:d2:91:c3:70:12:26:c5:2d:24:4a:e6:40: 2b:a7:97:2f:61:b5:a7:40:f5:98:35:1c:50:f4:87: f5:50:24:e3:b2:3a:25:d3:fa:8f:d6:a4:c5:8e:9b: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C1:E1:85:F6:CD:D8:71:46:A3:61:32:DC:BC:C7:60:96:A3:6A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b6007620-b8bf-3a41-8b2b-01dfba41d652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 27.0.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:14:4a:20:18:3a:28:c9:31:68:fe:df:68:1f:4e:77:e8:46: fc:65:4d:8f:d5:46:6b:5c:a5:9e:2d:43:ea:b1:15:28:b6:6f: 3b:ed:9b:e1:4e:ff:e6:ba:3a:ba:1c:fb:47:c1:7f:30:56:2d: 8b:bd:ff:8a:fe:c9:28:f3:f0:2f:53:eb:f5:4e:69:b2:d9:99: 6c:8a:14:be:a1:6a:88:61:e0:e6:ad:15:f2:76:3f:42:2e:1d: 0a:57:da:76:5f:d9:3e:43:ae:09:0f:21:ea:db:2d:ce:2d:55: 9b:e2:82:80:ed:84:b4:d9:27:d2:38:9c:6f:0a:a2:df:86:ee: 36:a1:c5:0f:1e:7b:26:7b:f4:ec:12:d2:07:cd:ca:15:52:85: 8d:39:79:da:2c:15:81:1d:b6:20:4f:9a:44:32:4b:81:b1:28: 28:65:de:8d:0d:90:2b:d8:37:f5:83:91:34:55:b6:72:e1:f5: 07:de:75:29:b3:0b:92:dd:b8:df:be:3c:b5:62:d0:c4:ba:47: b8:17:c9:8e:48:4b:1a:87:15:dd:35:90:a8:29:55:4e:5a:a3: 68:88:d8:b4:ae:96:45:27:9a:2c:a0:bb:01:34:ff:cc:57:e6: 76:e7:02:b4:9f:44:d2:b2:e3:39:4a:d1:ff:12:59:b1:9d:2d: df:2e:71:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDPC5FWtYCDWQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NjhhNGYzNTYtMDIwOS00ZmM1LWJjNWYtMTRkNTczYzU1MzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvwtHApljAaB0JY+1zW2x5EzeMvpIvtWt57d 4RgUU/zlUOfbu1pOJb29+wTKeWif8sawmEmn1PRD6qJYoHuA8LVwiW1JFmoXC/p1 rWIaKpj97xATvg7U8dwRuig3NXX/Pm0dQPvEqT/GeYU40vS0Pd6a/TaeMIFh0DrZ H/Uhn/B/6YVHuS8hsMkVNueL5dFTCsAg3OXHrLKRD/XtJUpPvK/DGBg0l6n0BGVR YRLJzpn6lmkuuFap1VIf88hVQ5Gz63hTPS2D/rPxZD6MQ5H2VtbY09HSkcNwEibF LSRK5kArp5cvYbWnQPWYNRxQ9If1UCTjsjol0/qP1qTFjptJkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzB4YX2zdhxRqNhMty8x2CWo2pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvYjYwMDc2MjAtYjhiZi0z YTQxLThiMmItMDFkZmJhNDFkNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGwDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcUSiAYOijJMWj+32gfTnfoRvxlTY/VRmtcpZ4tQ+qxFSi2bzvtm+FO /+a6Oroc+0fBfzBWLYu9/4r+ySjz8C9T6/VOabLZmWyKFL6haohh4OatFfJ2P0Iu HQpX2nZf2T5DrgkPIerbLc4tVZvigoDthLTZJ9I4nG8Kot+G7jahxQ8eeyZ79OwS 0gfNyhVShY05edosFYEdtiBPmkQyS4GxKChl3o0NkCvYN/WDkTRVtnLh9QfedSmz C5LduN++PLVi0MS6R7gXyY5ISxqHFd01kKgpVU5ao2iI2LSulkUnmiyguwE0/8xX 5nbnArSfRNKy4zlK0f8SWbGdLd8uceQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:43 2025 by rpki-client